DATA PROTECTION • WAIG LEGAL

Privacy Policy

Effective date and last updated 15 September 2026. This Privacy Policy explains how Scarlz Moments Private Limited, trading as WAIG, collects, uses, shares, retains and protects personal information.

Last updated: 15 September 2026•Ref: WAIG-PRIV-2026-V1•~3 min read

Document status: Active

Official Policy Notice

This Privacy Policy explains how Scarlz Moments Private Limited, trading as WAIG, collects, uses, shares, retains and protects personal information in connection with https://waig.in, Mystery Tours, Plan My Tour enquiries, Gift Vouchers and related services. WAIG determines why and how this information is processed and is the relevant data fiduciary or body corporate under applicable Indian law. This Policy is intended to operate under applicable Indian privacy and information-technology law, including the Information Technology Act 2000 and rules made under it, and the Digital Personal Data Protection Act 2023 and Rules as their relevant provisions become applicable.

This document sets forth the principles and rules governing your engagement with WAIG. As our service offerings expand, comprehensive clauses will be updated directly on this page.

01.

Scope

This Policy applies when a person visits the Website; uses a form or live chat; communicates with WAIG by email, telephone, WhatsApp, social media or another online or offline channel; purchases or redeems a Gift Voucher; submits an enquiry; or makes or joins a Booking. It also applies to information provided by a Booking Lead about other Travellers and to information received through an authorised employee, call centre, agent or service provider.

A Service Provider or payment provider may independently determine how it processes information in its own systems. Its privacy notice applies to that independent processing.

02.

Information WAIG collects

2.1 Identity and contact information

WAIG may collect name, title, date of birth or age category, postal address, email address, telephone number, alternate contact details and similar identifiers required for an enquiry, purchase or booking.

2.2 Travel preferences and booking information

WAIG may collect departure city, trip type, proposed dates, duration, number and age category of Travellers, preferred travel mode, budget, package, destination or surprise-tour preferences, accommodation and activity preferences, accessibility or dietary requirements, itinerary, booking number, status and related correspondence.

2.3 Identity and travel documents

Where necessary for a requested service, WAIG may collect copies or details of passports, visas, permits, identity documents, insurance documents, tickets and other travel records. WAIG will not request a document merely because it may be useful; the request will be tied to a booking, legal, identity, safety or Service Provider requirement.

2.4 Health and accessibility information

WAIG may receive vaccination or health documentation and information about mobility, accessibility, allergies or other special requirements where the Traveller chooses to provide it or it is legally or operationally necessary for travel. This information may constitute sensitive personal information and will be used only for the stated travel, safety or legal purpose.

2.5 Payment and invoice information

WAIG may receive the amount, payment type, payment status, date, transaction or gateway reference, invoice information, refund status and balance due. Complete card, bank-account and authentication credentials are processed within the payment provider's environment and are not intended to be stored by WAIG unless expressly disclosed.

2.6 Gift Voucher information

WAIG may process purchaser and recipient details where supplied, voucher value, code or reference, purchase date, status, expiry and the Booking against which it is redeemed. WAIG currently offers INR 5,000, INR 10,000, INR 15,000 and INR 20,000 vouchers valid for 180 days from purchase.

2.7 Enquiries about communications and customer content

WAIG may retain enquiry forms, Plan My Tour requirements, support requests, complaints, email, SMS, WhatsApp and chat communications, feedback, reviews and photographs or videos voluntarily supplied by a customer.

2.8 Technical and usage information

The Website, hosting systems and enabled tools may automatically receive IP address, device and browser type, operating system, referring page, pages visited, date and time of access and basic usage or chat information.

03.

Sources of information

WAIG collects information directly from the relevant person; from a Booking Lead, parent or lawful guardian; through the Website and enabled technologies; from payment, communication and business-system providers; and from Service Providers involved in an enquiry or Booking. A person supplying another Traveller's information must have authority to do so and must make this Policy available to that Traveller where appropriate.

04.

Purposes of processing

WAIG processes personal information only for a lawful and stated purpose, including to:

respond to an enquiry and prepare a proposal or package;
use questionnaire responses to curate a Mystery Tour or Plan My Tour itinerary;
verify identity, travel eligibility, documents and special requirements;
create, administer, amend or cancel a Booking and coordinate Service Providers;
process and reconcile payments, balances, invoices, vouchers, refunds and chargebacks;
send confirmations, destination reveals, itinerary notices and other service communications;
provide support, investigate complaints and protect Traveller safety;
prevent fraud, misuse and security incidents and maintain service integrity;
maintain tax, accounting, contractual and legal records and comply with lawful requests;
establish, exercise or defend legal claims;
improve the Website and services using proportionate operational or aggregated information.

WAIG will obtain consent for the stated purposes where consent is the applicable basis for processing. It may process information without consent only in a circumstance expressly permitted by applicable law, including compliance with a legal obligation or response to a qualifying medical emergency or threat to life. Information will not be used for a new incompatible purpose without an appropriate notice and, where required, fresh consent.

05.

Package selection and automated processing

Questionnaire responses may be applied to WAIG's pricing and package-selection rules to identify suitable options. WAIG's current package pricing is maintained within its systems and does not rely on live airline or hotel data for every calculation. A customer may contact WAIG if a material input is incorrect or requires review.

06.

How information is shared

WAIG shares only information reasonably necessary for the relevant purpose. Recipients may include:

airlines, hotels, transporters, insurers, destination management companies, activity providers and other Service Providers required to quote, book or perform travel services;
Razorpay or another disclosed payment provider, acquiring bank and payment participant;
Zoho services used for customer relationship management, WorkDrive storage, accounting, live chat and related business operations;
communication, hosting, security, information-technology and professional service providers to the extent they are engaged by WAIG and need the information for their service; and
courts, regulators, law-enforcement agencies and other authorities where disclosure is required or permitted by law or reasonably necessary to protect legal rights or safety.

07.

Zoho services and data location

WAIG uses Zoho WorkDrive and other enabled Zoho One services, including Zoho CRM, Zoho Books and Zoho SalesIQ. WAIG has confirmed that its relevant Zoho production account is configured for Zoho's India data-centre region. Zoho identifies Mumbai as its primary India data centre and Chennai as its secondary India data centre. Zoho's service and privacy materials may permit processing or access by Zoho group entities and subprocessors in other countries in some circumstances. WAIG therefore does not promise that every instance of processing will occur only in India. Any cross-border processing will remain subject to applicable Indian law and the relevant service arrangements.

08.

Payment processing

Razorpay or another enabled provider processes information in its payment environment under its own privacy policy and regulatory obligations. WAIG may exchange transaction identifiers, amount, status, refund and reconciliation information with that provider. Customers should not send complete card, banking password, PIN or one-time password to WAIG by email, chat or telephone.

09.

Cookies and similar technologies

WAIG does not currently use non-essential advertising cookies through its own Website features. The Website and integrated services may nevertheless use strictly necessary or session technologies for security, navigation, live chat, checkout and payment. Zoho SalesIQ, Razorpay and other enabled third-party components may place cookies or similar identifiers and collect technical or usage information under their own notices.

WAIG will not activate non-essential analytics, advertising or profiling technologies without updating this Policy and providing an appropriate choice or consent mechanism where required. Browser settings may block some cookies, but blocking essential cookies can prevent the Website, chat or checkout from functioning.

10.

Communications and marketing

WAIG may use the contact details supplied for enquiries, confirmations, payments, invoices, vouchers, destination reveal, itinerary and safety updates, support and other service communications. These messages may be delivered by email, SMS, telephone, WhatsApp, live chat or another channel used for the transaction.

Promotional messages require the consent or other lawful basis applicable to that channel and will include an available method to opt out. An opt-out does not prevent essential service, security, legal or transactional messages.

11.

Children

The Website is intended to be used by adults. WAIG may process information about a child included as a Traveller when it is supplied by the child's parent, lawful guardian or an authorised Booking Lead for travel arrangements. WAIG may verify the adult's identity and authority and obtain verifiable parental or guardian consent where required by applicable law.

WAIG does not knowingly invite a child to make an independent Booking and will not track or behaviourally monitor children or direct targeted advertising at them. A parent or guardian who believes that a child's information was supplied without authority should contact WAIG.

12.

Photographs videos reviews and testimonials

WAIG may use customer content to respond to the submission and provide the requested service. Identifiable photographs, videos, reviews or testimonials will be used for advertising or public promotion only under a separate clear permission or where the person unmistakably submitted the content for that public purpose. A person may withdraw permission for future use by contacting WAIG, although withdrawal does not invalidate a use already lawfully completed.

13.

Security

WAIG will use reasonable technical and organisational safeguards appropriate to the nature of the information and risk. These safeguards may include access controls, account security, secure transmission where supported, vendor controls and procedures for suspected incidents. Access will be limited to personnel and providers who need the information for an authorised purpose. No online transmission or storage system can be guaranteed absolutely secure.

14.

Retention and deletion

WAIG retains personal information only for as long as reasonably necessary for the purpose collected and any applicable legal, tax, accounting, fraud-prevention, dispute or insurance requirement. The period depends on the record and the Booking. Travel-document and health information should be removed or de-identified when no longer needed for travel or a legal requirement; transaction and invoice records may need to be kept longer.

When retention is no longer necessary, WAIG will delete, anonymise or securely isolate the information in accordance with its systems and provider arrangements. Deletion from backups and third-party systems may follow their controlled deletion cycle. A request for deletion may be refused or deferred to the extent retention remains legally required or necessary for an existing claim or transaction.

15.

Rights and choices

Subject to applicable law and verification of identity, a person may request information about WAIG's processing, access to a summary of personal information, correction or completion of inaccurate information, erasure where retention is no longer justified, withdrawal of consent, grievance redressal and nomination of another person to exercise rights in the circumstances provided by law.

Withdrawal of consent does not affect processing already lawfully completed. If information remains necessary to provide a requested Booking or comply with law, withdrawal or deletion may prevent WAIG from continuing the service and may engage the applicable cancellation terms. WAIG will explain the consequence where reasonably practicable.

16.

Personal information breach

WAIG will investigate a suspected personal information breach, take reasonable containment and remediation steps, preserve necessary records and notify affected persons and the competent authority when and within the time required by applicable law. A notification may be delayed only where law permits or a competent authority directs.

17.

International processing

A Service Provider, technology provider or its group company may access or process information outside India. WAIG will permit such processing only to the extent necessary for the service and allowed by Indian law, including any restriction notified by the Central Government, and will use appropriate contractual and vendor safeguards. Travel information may necessarily be sent to a provider in the destination country.

18.

Third party websites

The Website may link to or integrate a third-party website or service. WAIG is not responsible for an independent third party's content or privacy practices. A user should read the notice presented by that third party before submitting information to it.

19.

Changes to this Policy

WAIG may update this Policy to reflect changes in services, systems or law. The revised version and effective date will be published on the Website. WAIG will provide a prominent notice and seek fresh consent where a material change affects an existing purpose and applicable law requires it.

20.

Contact and grievance redressal

Questions, complaints and requests concerning this document or a booking may be sent to:

Scarlz Moments Private Limited

Trading as: WAIG

Corporate identity number: U79110TN2026PTC196262

Registered office: Door No 14/102, 116/1, Sir Theagaraya Road, T.Nagar, Chennai - 600017, India

Website: https://waig.in

Email: hello@waig.in

Telephone: +91 79410 57900

Grievance Officer: Mr. Prakash M, Assistant Manager – Admin & HR

Grievance email: hello@waig.in

WAIG will acknowledge a consumer grievance within 48 hours and endeavour to resolve it within one month from receipt, subject to applicable law. Privacy requests and grievances will be handled within the period prescribed by applicable data protection law.